Applications
Intermediate
Host Your Own Website with Hugo – Like Serverküche Itself
Build a static website with Hugo and serve it from a Docker container behind Traefik – fast, secure, no database. …
·
8 min read
Tutorials
All self-hosting tutorials from the Serverküche.
All tutorials
Basics
Intermediate
Understanding Docker Networks: bridge, internal DNS & the proxy network
Why does every app recipe declare a proxy network? This guide explains Docker networks, internal DNS and container …
·
7 min read
Basics
Beginner
Understanding Linux Users, Groups & File Permissions
Who is allowed to do what on your server? This foundational guide explains users, groups and file permissions with real …
·
8 min read
Applications
Intermediate
Optimizing Immich: mobile backup, multilingual AI search & family setup (Part 2)
Immich part 2: make the mobile backup reliable, switch the AI search to your language, add existing photos as an …
·
11 min read
Basics
Beginner
How HTTPS actually works (and what Traefik does for you)
Certificate, chain of trust, Let's Encrypt, handshake: this foundational guide explains HTTPS with real commands – and …
·
8 min read
Applications
Intermediate
AdGuard Home: network-wide ad and tracking blocker
Set up AdGuard Home with Docker: your own DNS server that blocks ads, trackers and malicious sites for all devices – …
·
8 min read
Applications
Advanced
Forgejo Actions: your own CI/CD runner with Docker
Set up and register a Forgejo Actions runner with Docker-in-Docker: your own CI/CD pipelines on the self-hosted Git …
·
9 min read
Applications
Advanced
Email deliverability: SPF, DKIM, DMARC and PTR done right
So your self-hosted mails land in the inbox instead of spam: reverse DNS, SPF, DKIM and DMARC explained, set up and …
·
14 min read
Applications
Intermediate
Stalwart: the lightweight mail server in a single container
Set up Stalwart Mail Server with Docker: SMTP, IMAP, JMAP and spam filter in a single, lean container – the modern …
·
10 min read
Applications
Advanced
Your own mail server with Mailcow: setup from scratch
Set up Mailcow (dockerized) on your own server: Postfix, Dovecot, Rspamd and SOGo webmail under your domain – a complete …
·
13 min read
Applications
Intermediate
ntfy: push notifications from your own server to your phone
Self-host ntfy with Docker & Traefik: push messages to your phone via a simple curl – ideal for backup reports, …
·
11 min read
Basics
Beginner
Docker volumes vs. bind mounts: where your data really lives
Named volume or bind mount? This foundational guide explains the difference, shows both with real examples, and when to …
·
7 min read
Applications
Intermediate
Self-hosting Matomo cookieless: analytics without a consent banner
Set up Matomo 5.12 with Docker & Traefik: privacy-friendly web analytics with IP anonymization, entirely without Google …
·
13 min read
Applications
Intermediate
Forgejo: your own Git server behind Traefik
Set up Forgejo with Docker & Traefik: your own Git server with HTTPS, repos via web UI, cloning over HTTPS and SSH – the …
·
11 min read
Applications
Intermediate
HitKeep: self-host privacy-friendly web analytics
Set up HitKeep with Docker and Traefik: cookieless, GDPR-friendly website statistics on your own server – with tracking …
·
10 min read
Security
Intermediate
Setting up a WireGuard VPN: secure access to your own server
A lean WireGuard VPN natively on the netcup server: keys, server and client config, firewall, phone QR – plus the Docker …
·
12 min read
netcup
Intermediate
netcup VPS 1000 G12 benchmarked: how fast is it really?
Real benchmark figures for the netcup VPS 1000 G12: CPU, RAM, NVMe and network – measured with sysbench and fio, …
·
8 min read
Basics
Advanced
Keeping your whole Docker stack safely up to date
Update discipline for your Docker stack: pin versions, get notified about updates with Diun, apply them safely, clean up …
·
14 min read
Security
Advanced
CrowdSec: modern, collaborative intrusion prevention
Set up CrowdSec with the Traefik bouncer: detect attacks from the access logs, block attackers with a 403 and benefit …
·
17 min read
Basics
Beginner
The essential terminal commands for your server
The toolbox for the server terminal: from htop, btop and ncdu for debugging to tmux, rsync and dig for daily work – with …
·
11 min read
Containers
Advanced
Monitoring with Grafana & Prometheus: your server in live dashboards
A complete monitoring stack of Prometheus, node-exporter, cAdvisor and Grafana behind Traefik – with live metrics for …
·
12 min read
Applications
Intermediate
Self-hosting Jellyfin: your own media server behind Traefik
Set up Jellyfin with Docker behind Traefik: stream your movies, series and music – with HTTPS and the library on …
·
12 min read
Applications
Intermediate
Self-hosting Immich: your private photo backup behind Traefik
Set up Immich with Docker behind Traefik: the self-hosted alternative to Google Photos – with automatic phone backup, …
·
11 min read
Applications
Intermediate
Self-hosting Paperless-ngx: the paperless office with OCR
Set up Paperless-ngx with Docker behind Traefik: archive documents searchably via OCR – with full-text search, tags and …
·
11 min read
Applications
Intermediate
Hardening & optimizing Nextcloud: clear every warning (part 2)
Get your Nextcloud admin overview green: set up HSTS headers, email sending, enforced two-factor auth and brute-force …
·
13 min read
Applications
Intermediate
Installing Uptime Kuma: server monitoring behind Traefik
Set up Uptime Kuma behind Traefik and monitor your services: monitors, notifications and a status page – the first real …
·
11 min read
Applications
Intermediate
Self-hosting Nextcloud: your own cloud behind Traefik
Set up Nextcloud with Docker behind Traefik: your own cloud for files, calendar and contacts – with MariaDB, Redis and …
·
11 min read
Applications
Intermediate
Vaultwarden: your own password manager behind Traefik
Self-host Vaultwarden: a lean, Bitwarden-compatible password manager behind Traefik with HTTPS, an admin panel and an …
·
11 min read
Security
Intermediate
Restic backups: encrypted and off-site
Off-site backups with Restic: set up encrypted, restore snapshots, prune with retention and automate via a systemd …
·
12 min read
Security
Intermediate
Setting up Fail2ban: block brute-force attacks automatically
Fail2ban watches your logs and bans IPs after too many failed attempts – with a safe whitelist for your own address so …
·
8 min read
Containers
Intermediate
Setting up Traefik: reverse proxy with automatic HTTPS
Traefik as a reverse proxy in front of your containers, with automatic Let's Encrypt certificates: every app gets a …
·
13 min read
Security
Beginner
unattended-upgrades: automatic security updates for Debian
Debian installs security updates automatically: set up unattended-upgrades, control the reboot, and verify it really …
·
5 min read
Basics
Beginner
Connecting a domain to your server (DNS basics)
A and AAAA records, TTL and propagation explained clearly: how your own domain points to your server – the prerequisite …
·
8 min read
netcup
Beginner
netcup snapshots & the Server Control Panel (SCP)
Use the netcup Server Control Panel & snapshots properly: a safety net before risky changes – and why it's no substitute …
·
7 min read
Security
Beginner
Setting up a firewall with UFW
Set up a host firewall in minutes with UFW: block everything except SSH, HTTP and HTTPS on your server – without ever …
·
5 min read
netcup
Intermediate
Setting up the netcup firewall in the SCP (with the stateless-UDP trick)
Set up the netcup firewall as network protection in front of the server: composable policy templates in the SCP – with …
·
11 min read
Containers
Intermediate
Understanding Docker Compose: services, volumes, networks
compose.yaml explained: services, volumes, networks and variables – the Docker vocabulary every app recipe in the …
·
11 min read
Containers
Beginner
Installing Docker on Debian
Install Docker Engine and Docker Compose cleanly from the official repository – the foundation for most self-hosting …
·
4 min read
Security
Beginner
Hardening SSH access
Key-based login instead of passwords and no root login: the most important moves to harden the front door to your …
·
5 min read
Basics
Beginner
First steps with a netcup VPS
From a freshly ordered netcup server to a ready-to-use system: SSH login, system updates, a sudo user and the most …
·
5 min read